<?php if (!defined('DASHBOARD_ROOT')) { http_response_code(403); exit; } ?>
<div class="panel-section">
    <div class="section-title">
        <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M5 12h14M12 5l7 7-7 7"/></svg>
        Local Payment Node (Podman)
    </div>
    
    <div class="metrics-grid">
        <div class="metric-card">
            <div class="metric-label">Node Status</div>
            <div class="metric-val" id="node-status" style="color: #10b981;">Online (10.88.0.2)</div>
        </div>
        <div class="metric-card">
            <div class="metric-label">Wireguard Tunnel</div>
            <div class="metric-val" id="wg-status" style="color: #3b82f6;">Active (wg0)</div>
        </div>
        <div class="metric-card">
            <div class="metric-label">Stripe API</div>
            <div class="metric-val" id="stripe-status" style="color: #10b981;">Connected</div>
        </div>
    </div>
    
    <div class="panel-section" style="margin-top: 30px;">
        <h3 style="margin-top: 0; color: var(--text);">Engine Configuration</h3>
        <p style="color: var(--text-muted); font-size: 0.9rem;">
            The payment node runs in an isolated Podman container on a 10.88.x.x subnet. 
            All traffic is forced through WireGuard port 49629.
        </p>
        
        <div style="background: rgba(0,0,0,0.3); border: 1px solid var(--border); border-radius: 6px; padding: 15px; margin-top: 15px; font-family: monospace; font-size: 0.85rem; color: #a5b4fc;">
            podman run --name payment-proxy --network payment-net --ip 10.88.0.2 -v /etc/wireguard:/etc/wireguard:Z payment-node
        </div>
    </div>
</div>
